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DESCRIPTION 



BACKGROUND OF THE INVENTION 



Field of the Invention 



10 The invention generally relates to a system and method of providing digital rights 

management for objects, and more particularly, to providing authors of digital content to create 
and distribute the digital content using a uniform process. 



Background Description 

15 

Advances in electronic commerce, such as the Internet, now permit distribution of 
valuable digital content rapidly and immediately over various networks. Electronic commerce 
permits digital content to be downloaded to client systems in many different formats, however, 
security for enforcing and controlling ownership rights to the digital contents continues to be 
20 problematic while allowing the authors of the digital content flexibility and convenience in 
creating, marketing and distributing the content. 
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Creators and authors of digital content typically do not wish to be burdened with the 
overhead and demands of packaging and protecting their digital electronic content, but would 
rather concern themselves mostly with the content, itself, and perhaps marketing issues. 
Currently, packaging the electronic content and overseeing the distribution of the electronic 
5 content is burdensome, something authors would rather defer or avoid entirely. 

A number of Digital Rights Management (DRM) products have attempted to address 
certain issues of licensing and controlling distribution of digital contents. One concern is to 
prevent unauthorized duplication of digital content after it has been download to a client system. 
A solution has been to encrypt the electronic content, and associate rights to such content. In 
10 such as system, after acquiring the rights to access the content, a user may only then access and 
decrypt the contents. In fact, some DRM systems prevent users from directly decrypting the 
contents. Therefore, they cannot decrypt the contents, save them, and distribute them in 
decrypted form, unless permitted to do so by authorized DRM software. 

A generally adopted approach to DRM management has been to provide a specific player 
15 (new browser or media player, etc.) which users must install and use for accessing DRM content. 
However, this approach is not very flexible and too restrictive for accessing generally distributed 
digital content by large numbers of authors, such as, for example, individual college faculty 
members to commercial publishers, etc. 

An issue not addressed though by DRM, is when authors of electronic content wish to 
20 provide multiple related digital contents as parts (e.g., video, text, music, and educational 
content) and control the individual parts from creation through distribution. Existing DRM 
mechanisms that are currently available for creating and managing the control of the multiple 
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parts is inadequate and provide no relief from the complex burdens of creating, packaging and 
on-going distribution control. This, of course, is very burdensome and time consuming. 

Also, currently, there is no comprehensive system or service that can provide overall 
management and creation process by authors. Issues such as creation control, secure evolutionary 
5 protection, rights management, storage, standards compliance are not being addressed so that 
these issues are kept to a minimal concern. 

SUMMARY OF THE INVENTION 

10 In an aspect of the invention, there is a method for providing learning objects. The 

method comprises accessing an authoring application for creating a shareable content object 
(SCO) through a web based remote access and/or via download of the authoring application. 
Further the invention provides for composing a shareable content object (SCO) representing one 
or more assets, assigning a digital rights to the SCO to secure the one or more assets, and 

15 individually controlling access to the SCO and the one or more assets by utilizing the assigned 
digital rights to the SCO or the one or more assets. 

In another aspect of the invention, a method for creating learning objects is provided. 
The method comprises creating a package containing one or more shareable content objects 
(SCOs), assigning digital rights management (DRM) to the one or more SCOs, updating an on- 

20 line electronic store (e-Store) with the one or more SCOs, and making the one or more SCOs 
available for searching and downloading at a client, wherein access to the one or more SCOs is 
controlled by the DRM, and the one or more SCOs include one or more assets. 
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In another aspect of the invention, there is a system for providing learning objects. The 
system comprises a portal server to permit authoring of at least one shareable content object 
(SCO) having one or more assets, a digital rights management (DRM) content packager 
accessible via the portal server for assigning digital rights to the at least one shareable content 
5 object (SCO), a DRM license server for assigning license criteria to the at least one SCO and the 
one or more assets and a content manager for storing or retrieving the at least one SCO and the 
one or more assets. 

In another aspect of the invention, a digital rights protection system is provided that 
includes a secure uploading service capable of receiving unprotected digital content having one 

10 or more parts, associated metadata, and any promotional materials. The invention also includes 
an automatic validation component adapted to ensure conformance of the unprotected digital 
content to Shareable Content Object Reference Model (SCORM) standards and providing error 
messages to enable correction, and a digital rights generation layer having one or more 
components adapted to provide a web-based interface for specifying different rights to the one or 

15 more parts for providing protected digital content. 

In another aspect of the invention, a computer program product is provided comprising a 
computer usable medium having readable program code embodied in the medium and includes 
the computer program product includes a first computer to compose a shareable content object 
(SCO) representing one or more assets, a second computer code to assign a digital rights to the 

20 SCO to secure the one or more assets, and a third computer code access the SCO and the one or 
more assets, wherein the access to the SCO and the one or more assets is controlled by the 
assigned digital rights. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



Figure 1 is a block diagram of an embodiment of the invention; 

Figure 2 is a flow chart of steps of an embodiment for using the invention; 

Figure 3 a flow chart showing steps of an embodiment of DRM packaging; and 

Figure 4 is a flow chart showing steps of an embodiment of modifying and updating an 

eStore. 



DETAILED DESCRIPTION OF 
EMBODIMENTS OF THE INVENTION 



This invention provides a system and method for authors of on-line material (e.g., 
learning objects) to develop and store their learning objects while also protecting their digital 
rights during the marketing and distribution of such learning objects. The digital content may 
include such asset content as video, music, text, educational content, or the like. 

The method and system of the invention may provide for various stages/layers that 
include, for example: (i) author registration that permits authors to access and become a 
registered user of the system; (ii) author content creation that permits authors to compose and 
create a Shareable Content Object (SCO) which represents one or more assets; (iii) DRM 
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packaging that permits name tagging and security encasement, and (iv) ingesting and eStore 
publishing. These stages are described below in reference to Figures 2-4. 

Figure 1 is a block diagram of an embodiment of the invention, generally denoted by 
reference numeral 100. The invention includes one or more client systems 105 (e.g., a personal 
5 computer (PC)) having a browser and DRM extensions 1 15, for managing digital rights at the 
client. The client systems 105 communicate via a network, such as the Internet 120, to one or 
more servers that include a portal server 125 ( e.g. IBM's Websphere™, or the like) that has one 
or more universal resource locators (URLs) and/or uniform resource identifiers (URI) for 
allowing single secure sign-on by users with a common user interface. The portal server 125 may 

10 also have the capability of provisioning a system administration function and user management. 
The system administration function encompasses handling the creation of different user's 
accounts with different roles and associates each user according to his role to a specific 
commerce suite 135 (e.g. Websphere Commerce Suite) for providing suppliers and account 
managers with commerce functionality, such as, for example, (i) contract view and 

15 update/approval, (ii) order management business processes, (iii) request for quote (RFQ) creation 
and approval, and, (iv) invoicing view and update, etc. The commerce suite 135 may include an 
electronic store (eStore) for receiving, storing, searching and cataloging digital content, and for 
making the digital content available for distribution. 

The system of Figure 1 further includes a DRM content packager 130 for receiving new 

20 digital content from an author and securely packaging the content. Also included may be an 

electronic store (eStore) 135 for receiving, storing, searching and cataloging digital content, and 
for making the digital content available for distribution. The system further includes a DRM 



YOR9-2003-0629 



6 



license server 140 to generate a key pair for a client and maintain the client public key for fixture 
encryption purposes and sends a private key to a client, when appropriate. All components 
associated with rights generation typically have a public-key certificate by a certificate authority 
that all the components are trusted. 
5 The invention further includes a learning management sub-system (LMS) 145 (for 

example, Lotus Learning Management System) which provides a learning environment that 
delivers and manages a classroom-based, e-learning centric, operation using digital contents 
maintained in a learning objects repository 155. The LMS 145 may be used to provide corporate 
or university training solutions (or the like) or other digital information using the DRM 

10 protection capabilities of the invention. A lightweight directory access protocol (LDAP) may be 
employed for authenticating users signing onto the portlets 146 of the portal server 125. 

The system further includes a learning objects repository (LOR) 155 which is a long term 
storage and management portion that receives and delivers packaged digital content and other 
data. The LOR 155 includes a content delivery 160 capability for accessing and providing digital 

15 content (as requested by the LMS and other portions of the system), and a content management 
loader 165 for handling requests from the DRM content packager 130 to package updates, 
versioning, insertions, or deletions into/from a content manager 170. The content manager 170 
manages the learning objects, Shareable Content Object Reference Model (SCORM) metadata 
(SCORM is a generally known standard initiative), and content management tools, themselves, 

20 for operational manipulation of all the digital content and learning objects. A database 167 may 
also be used to store the learning objects. The SCORM metadata typically comprises one or more 
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files generated by an author to describe the digital contents or the learning objects for searching 
by users or subscribers. 

Figures 2-4 are flow diagrams of an embodiment showing steps of using the invention. 
Figures 2-4 may equally represent a high-level block diagram of components of the invention 
5 implementing the steps thereof. The steps of Figures 2-4 may be implemented on computer 
program code in combination with the appropriate hardware. This computer program code may 
be stored on storage media such as a diskette, hard disk, CD-ROM, DVD-ROM or tape, as well 
as a memory storage device or collection of memory storage devices such as read-only memory 
(ROM) or random access memory (RAM). Additionally, the computer program code can be 

10 transferred to a workstation over the Internet or some other type of network. Figures 2-4 may be 
implemented, for example, using the components of Figure 1. 

Figure 2 is a flow chart of an embodiment of steps for using the invention starting at step 
200. At step 205 an author, using a client system, signs on with the portal server. This may 
include, for example, starting an Internet Explorer (IE) session (or similar session) and going to 

15 the URL of the portal server (e.g. http://. . .). The user may click on a "Signup" link presented by 
the portal server (e.g., Websphere), fill in a Web form with the author's personal information, 
and submit the information. At step 210, the system sends back an email (or other notification) 
containing the author's registration confirmation, a user-id, a password (pw), and a logon URL, 
or other desired information. 

20 At step 215, the author navigates to the logon URL of the portal server (e.g., http://...) as 

previously supplied, and accesses the system registration link and supplies the author's user-id 
and pw to register. The logon URL provides authors with web pages that are presented through 
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the eLearning Portal for rendering portlets (e.g., 146) for the different components (e.g., LMS, 
eStore, and DRM packager, etc.) of the system into one common interface that is personalized 
according to the user's profile and role. The portal server also provides a single sign-on to those 
portlets, authenticating the users through LDAP or similar authentication process. 

When the author uses the user id and pw to logon to the system for a first time, 
registration and downloading of any extensions (software) needed to allow the author's browser 
to render DRM protected content occurs, this process may include the following operations: 

i) Checking the browser's version and downloading the extension code for DRM 
enablement appropriate for the version. 

ii) Downloading the application that the author will use to create the extended 
SCO rights metadata that is compliant to Open Digital Rights (ODRL) format 
(or any other generally known Digital rights expression Language) and the 
promo material. 

iii) The DRM license server generates the key pair for the client and maintains the 
client public key for future encryption purposes and sends the private key to the 
client. 

Also, at step 215, a file download window appears and the user may logon and optionally 
select to download an authoring application tool for SCO creation or download a DRM extension 
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to the user's client system. Authoring may alternatively occur as a remote web-based access. At 
step 220, a SCO is composed by an author and placed in a folder. This may be accomplished by 
using the downloaded authoring application tool which may be a SCORM compliant authoring 
tool to compose a shareable content object (SCO) on the client system (e.g., a personal 
5 computer). The SCORM tool may be a part of the DRM extensions 115. The SCO includes 
representation of a collection of one or more assets with their standard-compliant metadata and 
content packaging files. The author uses a SCORM compliant authoring tool to compose a 
Sharable Content Object (SCO), which represents a collection of one or more assets that include 
a specific launchable asset utilizing the SCORM run-time environment to communicate with 

10 learning management software (e.g., 145). 

The SCO, in one aspect, represents the lowest level of granularity of learning resources 
that typically can be tracked by the LMS using the SCORM run-time environment. The SCO 
may contain assets that are electronic representations of media, text, images, sound, web pages, 
assessment objects or other pieces of data that can be delivered to a Web client. An asset and 

1 5 SCO may be described with asset and SCO meta-data to allow for search and discovery within 
online repositories, thereby enhancing opportunities for reuse. The mechanism for binding assets 
and SCOs to asset and SCOs meta-data is provided by a standard content packaging information 
model. The SCORM meta-data information model describes data elements that are defined to 
build SCORM conformant meta-data records and may include additional data elements. All 

20 elements labeled as container elements allow for the capability to add extensions. Since the 
"rights" element may be labeled as a container element, then it may be extended to add a new 
element "drm", for applying digital rights. The "drm" element may be used to reference the 
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rights file that contains the usage rights of the SCORM learning asset (e.g., asset, SCO, content 
aggregation) which may be a local, or remote (e.g.,URL). 

Learning content in its most basic form is typically composed of assets that are electronic 
representations of media, text, images, sound, Web pages, assessment objects, or other pieces of 
5 data that may be delivered to a Web client. A SCO may be a collection of one or more assets 
that utilizes SCORM run-time environment to communicate with LMSs. A SCO represents the 
lowest level of content granularity that is tracked by an LMS using SCORM run-time 
environment. A SCORM resource package application profile defines a mechanism for 
packaging learning resources (e.g., assets and SCOs) without having to provide a specific 

10 organization, learning context, or curricular taxonomy. Packaging learning resources provides a 
common medium of exchange. A SCORM content package is typically a collection of reusable 
learning resources that may be transferred between learning systems. SCORM conformant meta- 
data records contain information that makes these assets/learning resources independent, 
searchable, and re-usable. 

15 In many cases, an asset or SCO may be a single file. However, there are cases where 

assets and SCOs may include multiple files. The SCORM resource package application profile 
allows for packaging assets and SCOs that comprise single files or multiple files. Also, assets 
and SCOs may be included locally or may be referenced externally. Locally packaged files may 
be included as physical files, and when referenced externally, the assets and SCOs may not be 

20 included it package, but instead via an URL. 
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Still referring to Figure 2, at step 225, the SCO common folder is compressed (using a 
ZIP utility or the like) to produce a package.zip file. At step 230, a DRM packaging session is 
started on the client system and the author logons to a portal and selects a DRM packager. 

At step 235, the SCO compressed package (e.g., package.zip) is uploaded using a DRM 
packager portlet link when presented to the author. To aid the author, a Web page may be 
displayed for the author to input the path of the authored directories and to select the package.zip 
file path that is used for the zip file name field during uploading. An upload confirmation 
message may be displayed in the browser to indicate upload complete. 

At step 240, a check is made whether any information is missing or a violation has 
occurred and, if so, at step 245, an inquiry is presented to the author for missing information. If 
there is no missing information or violation, then at step 250, the process waits for the upload to 
complete, and the process completes at step 255. 

When the author is provided with a desktop application, it may be an applet based 
web-application to run on the client system. The applet may define: 

i) The rights that is associated with each individual SCO asset of an SCO. 

This application creates a "rights file" (that is compliant with ODRL 
language) and extends the SCO Rights Metadata to include this ODRL 
"rights file" (which may be an extensible markup language (XML) based 
file). Alternatively, a generally known format, for example, moving 
pictures expert group (MPEG) rights expression language (MPEG REL, a 
generally known expression language) may be employed. The rights may 
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include defining at least one of price, identity of the user, and length of use 
of each asset. ODRL is an XML rights expression language based on a 
model that establishes relationships among assets, parties, and rights. 
Assets may be digital objects identified by a globally unique identifier. 
Parties may be rights holders such as, for example, people or 
organizations, referred to as rights holders. Rights include permissions, 
requirements, and conditions. 

ii) Any promotional material and a thumbnail to be used as a promotional 

material in a catalog on the eStore. A promo.xml file may be created with 
the corresponding thumbnail in a promo folder under the root folder of the 
package. 

The generated digital content files may be placed under a SCO common folder. The 
author may use the desktop application that was downloaded during the registration process for 
this purpose. This desktop application may be an applet-based web-application running on the 
author's machine and may also provide the author with interfaces to: 

i) Create the extended SCO Rights Metadata, which is compliant to the ODRL 

format and is to be associated with its Metadata file. 
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ii) Prepare any promotional materials, including a thumbnail presentation of the 

SCO in a promo folder under the SCO common folder. 

Figure 3 is a flow chart showing steps of an embodiment of DRM packaging, starting at 
5 step 300. These steps of Figure 3 may also be employed, for example, by steps 230 and 235 of 
Figure 2. At step 305, the author logs onto the remote J2EE (Java 2 platform, Enterprise Edition) 
packager (i.e., DRM packer) and, at step 310, uploads the content package (package.zip) into the 
DRM content packager incoming folder using HTTPS (hypertext transfer protocol) connection 
(or the like). 

10 At 315, the user triggers the DRM content packager to process the uploaded package file 

(including the SCO and promotional material). At step 320, the user may browse and select the 
package filename into the DRM content packager web page and then invokes the DRM content 
packager to process this file. At step 325, a DRM packaging and rights generation session is 
started. 

15 At step 330, the DRM content packager parses the package file to extract the structure 

and titles of the packaged SCO and generates digital rights metadata files accordingly. 
Consequently, each entire SCO is treated as a package and given a universally unique 
PackagelD with a PkgName generated from the folder name on which each SCO is stored and a 
UID to assure its uniqueness in this packager. 

20 The extracted promo.xml may also be updated with the following: 

i) The SCO PackagelD; 

ii) Whether the SCO (and assets) is encrypted or not; 
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iii) Whether the SCO is to be delivered to the user in an online mode through LMS or 
offline by downloading it on the user's machines; 

iv) The type of package (Course/SCO); 

v) License Server address; 

vi) The content manager address; and 

vii) The promo contents (e.g.,promo.xml and thumbnails) are packaged into a secure 
container "Promo Secure Container". 



At step 335, the metadata of each SCO is parsed to identify whether this SCO should be 
10 DRM protected or not and whether it should be taken online through an LMS or offline 

(disconnected mode) through the client's machine. At step 340, the rights file associated with 
each SCO is updated. At step 345, the assets of each package (SCO) may be encrypted 
independently using randomly generated symmetric keys of each package (SCO) (only if the 
package is marked for encryption) or assigned individual rights. Packages may be assigned rights 
15 from the web-based interface provided to the authors to use for assigning rights that they 
associate with their content. This may be automatically translated by the system into rights 
fields' extensions in the associated metadata DR fields and appropriate rights files may also be 
automatically generated. The rights file of each SCO may be updated with symmetric keys used 
for its encryption (only if the package is marked for encryption) and the symmetric keys may be 
20 stored in associated metadata file, then encrypted with the DRM license server provided public 
key. Typically, the author (or other owner) owns the license rights to each SCO which facilitates 
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pricing structure according to the author's (or other owner) desire which are enforced by the 
rights file of each SCO. 

At step 350, the encrypted package (SCO) is packaged into a secure container "Content 
Secure Container" and each given a universally unique name PackagelD-Content. The content 
5 aggregation files (e.g. ContentAggregation "CA" files = MetaData "MD" + Manifest "MF"+ 
Content Packaging Info "CP + encrypted Rights "R") of each SCO are placed into the secure 
container, "Content Aggregation Secure Container," each with a universally unique name 
PackagelD-CA. The assets and SCO content are packaged separately from the CA files in order 
to avoid uploading the assets each time the rights or offers are updated. At step 355, At step 355, 

10 the digital container may be encrypted. 

The file transfer between components using Web services (i.e., applications components 
whose functionality and interfaces are exposed to users through application of Web technology, 
e.g., XML, HTTP, SOAP, etc.) may be accomplished by creating a Java object that stores the 
file to be transferred and this Java object is passed as a parameter through Web services. The 

1 5 DRM content packager invokes the CM loader to ingest the SCO package. 

At step 360, the DRM content packager invokes a Web service to update a database (e.g., 
167) in the learning object repository, passing it the Promo package for package updates or 
inserting a new package. Also, the store is notified in the same Web service whether an 
UPDATE, INSERT or DELETE operation is to be performed on this package identified with 

20 PackagelD. This repository component prevents any input/output operation that may lead to a 
rights violation when protected digital contents are stored. In embodiments, the DRM content 
packager is typically the component that has the authority to update or delete contents from the 
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system, as it is the component that owns the assets before being purchased. The process 
completes at step 365. 

Figure 4 is a flow diagram showing steps of an embodiment of modifying and updating 
the eStore, beginning at step 400. At step 405, the CM loader's request handler (part of the CM 
5 Loader) handles a request from the DRM content packager for any package requiring UPDATE, 
INSERT or DELETE. The request handler typically maintains the session connection between 
the DRM packager and the CM loader at step 410, after recovering a SCO file, the request 
handler may invoke a file container processor to process those files for extracting the necessary 
information from the CA files. At step 415, the SCO content and CA files are ingested into a CM 

10 resource manager as an item of two parts whose attributes are the information extracted from the 
CA files (which is typically from the SCORM metadata XML files). 

At step 420, the eStore processes the incoming promo package to extract the promo.xml 
(if it exists) to update the catalog information in the eStore database. At step 425, the eStore Web 
service checks for which operation is to be performed at the store (i.e., whether UPDATE, 

1 5 DELETE or INSERT). If the operation is an INSERT operation the promo.xml is used directly to 
add a new entry in the eStore catalog database. If it is an UPDATE operation, the promo.xml 
may be used to update the entry in the eStore catalog database. If it is a DELETE operation there 
will be no promo.xml and only the PackagelD is used to delete the appropriate record from the 
eStore database. At step 425, the promo thumbnail is stored in the eStore's promos directory. At 

20 step 430, the digital contents are made available to users. 

Thus, the invention provides for authors of on-line learning material (e.g.,learning 
objects) to develop and centrally store their learning objects while also protecting their digital 



YOR9-2003-0629 



rights throughout the life-cycle of a product. The digital content may include one or more asset 
content such as video, music, text, educational content, or the like, and each asset may 
individually be assigned digital rights to control access. 

Each SCO and rights may also provide a mechanism to associate different pricing 
5 structures for different components, according to the components, or charge differently based 
upon the client/customer identity or role. For example, an individual is charged differently than a 
corporation or a faculty member. 

When a user (e.g., a student) accesses a SCO via the LMS or offline, the rights of the 
accessed SCO and each asset associated with the SCO may now be individually enforced in the 
10 browser at the client system (e.g., personal computer) using the digital container rights associated 
with each SCO. Additionally, each SCO and each asset associated with the SCO in a digital 
container may each bear a unique price, enforced by the digital rights container. 

While the invention has been described in terms of embodiments, those skilled in the art 
will recognize that the invention can be practiced with modifications and in the spirit and scope 
15 of the appended claims. 
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